PingOne for Customers Passwordless

Configuring PingOne

Verify that your PingOne environment has the necessary configuration to run the PingOne for Customers Passwordless solution and enable all of the features you want to use.

About this task

These steps ensure that the PingOne configuration is correct and enable features such as magic links, agreements, and social sign-on.

Steps

  1. Optional: If you want to use magic links, verify that you have an email server and an email notification template configured in PingOne.

    Learn more about email servers in Configuring Trusted Email Addresses.

    Learn more about adding and customizing notification templates in Adding a notification and Editing a notification.

    1. Go to Settings → Sender.

    2. On the Email tab, select Ping Server.

    3. In the Domain list, select your trusted email domain.

    4. Enter the sender details:

      From Name: Enter the name that appears as the sender’s name in the email message.

      From Address: Select an email address from the list, or click New to open the New Address page and create a new address.

    5. Enter the reply-to details:

      Reply-To Name: Enter the name that appears as the reply-to name in the email message.

      Reply-To Address: Select an email address from the list, or click New to open the New Address page and create a new address.

    6. Click Save.

    7. Go to User Experience → Notification Templates.

    8. Verify that a notification template using the magic link exists. You can use the default General template or another email template.

      You must reference the magic link in the email notification template text using HTML. For example:

      <div style="display: block; text-align: center; font-family: sans-serif; border: 1px solid #c5c5c5; width: 400px; padding: 50px 30px;">
<img class="align-self-center mb-5" src="${logoUrl}" alt="${companyName}" style="${logoStyle}"/>
     <h1>Success</h1>
     <div style="margin-top: 20px; margin-bottom:25px">
     <p> Please click the link below to confirm your email for Authentication. </p>
     <a href="${magicLink}" style="font-size: 14pt">Confirmation Link</a>
     </div>
</div>

  2. Verify that you have an multi-factor authentication (MFA) policy configured in PingOne.

    For more information, see the MFA documentation.

    1. In PingOne, go to Authentication → MFA.

    2. Click the MFA policy marked as the default and verify that its Allowed Authentication Methods include the authentication methods that you want to use from the following:

      • Email

      • SMS

      • FIDO2

  3. Verify that the default population exists:

    1. Go to Directory → Populations.

    2. In the list of populations, verify that a population is marked as Default.

    3. If no existing population is marked as Default, select a population and click More options (⋮) → Edit Population.

    4. Click Make Default Population.

    5. Click Switch.

    6. Click Save.

  4. Optional: If you plan to use FIDO2, verify that the default Passkeys policy is selected.

    For more information about FIDO policies, see the FIDO documentation.

    1. Go to Authentication → FIDO.

    2. Verify that the Passkeys policy is marked as the default.

    3. If the Passkeys policy is not the default, click ⋮ → Make Default. then click Save.

  5. Optional: If you plan to use an agreement, verify that you have an agreement configured in PingOne and copy the agreement ID.

    Learn more about configuring agreements in Adding an agreement.

    1. Go to User Experience → Agreements.

    2. Verify that the agreement exists and is enabled.

    3. Click the Expand icon for the agreement.

    4. Copy the Agreement ID.

    The agreement ID is used in a later procedure to configure the flows in DaVinci.

  6. Optional: Verify that you have an external identity provider (IdP) configured in PingOne for each valid third party you want to use as a social sign-on option. Learn more about how identity providers are used in PingOne in Identity Providers.

    1. If you want to use Google as a social sign-on option, verify that Google is configured as an IdP according to the procedure in Adding an identity provider - Google. During configuration, use the following property mappings.

      Google Property PingOne Property

      email address

      username

      email address

      email

      family name

      family name

      given name

      given name

    2. If you want to use Facebook as a social sign-on option, verify that Facebook is configured as an IdP according to the procedure in Adding an identity provider - Facebook. During configuration, use the following property mappings.

      Facebook Property PingOne Property

      email address

      username

      email address

      email

      family name

      family name

      given name

      given name

    3. If you want to use Apple as a social sign-on option, verify that Apple is configured as an IdP according to the procedure in Adding an identity provider - Apple. During configuration, use the following property mappings.

      Apple Property PingOne Property

      email address

      username

      email address

      email